Systems and methods for automatic sensor registration and configuration

ABSTRACT

Various approaches to ensuring safe operation of industrial machinery in a workcell include disposing multiple image sensors proximate to the workcell and acquiring, with at least some of the image sensors, the first set of images of the workcell; registering the sensors to each other based at least in part on the first set of images and, based at least in part on the registration, converting the first set of images to a common reference frame of the sensors; determining a transformation matrix for transforming the common reference frame of the sensors to a global frame of the workcell; registering the sensors to the industrial machinery; acquiring the second set of images during operation of the industrial machinery; and monitoring the industrial machinery during operation thereof based at least in part on the acquired second plurality of images, transformation, and registration of the sensors to the industrial machinery.

RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No. 16/553,738, filed Aug. 28, 2019, which claims the benefit of and priority to U.S. Provisional Patent Application No. 62/724,945, filed Aug. 30, 2018, the entire disclosure of each of which is hereby incorporated by reference.

TECHNICAL FIELD

The present invention relates, in general, to sensors in a three-dimensional (3D) space, and, in particular, to systems and methods for performing automatic estimation of a sensor's position and orientation in 3D space.

BACKGROUND

Industrial machinery is often dangerous to humans. Some machinery is dangerous unless it is completely shut down, while other machinery may have a variety of operating states, some of which are hazardous and some of which are not. In some cases, the degree of hazard may depend on the location or distance of the human with respect to the machinery. As a result, various types of “guarding” equipment have been developed to separate humans and machines, thereby preventing machinery from causing harm to humans. One very simple and common type of guarding is a cage that surrounds the machinery, configured such that opening the door of the cage causes an electrical circuit to place the machinery in a safe state (e.g., shutting down the machinery). This ensures that humans can never approach the machinery while it is operating in an unsafe state.

More sophisticated types of guarding may involve, for example, optical sensors. Examples include light curtains that determine if any object has intruded into a region monitored by one or more light emitters and detectors, and two-dimensional (2D) LIDAR sensors that use active optical sensing to detect the minimum distance to an obstacle along a series of rays emanating from the sensors (and thus can be configured to detect either proximity or intrusion into pre-configured 2D zones). In addition, 3D depth sensors have been recently employed in various machine-guarding applications for providing guarding improvement. Examples of the 3D depth sensors include 3D time-of-flight cameras, 3D LIDAR, and stereo vision cameras. These sensors offer the ability to detect and locate intrusions into the area surrounding industrial machinery in 3D, which gives them several advantages over 2D sensors. For example, a 2D LIDAR system guarding the floorspace around an industrial robot will have to stop the robot when an intrusion is detected well over an arm's-length distance away from the robot, because if the intrusion represents a person's legs, that person's arms could be much closer and would be undetectable by the 2D LIDAR. However, a 3D system can allow the robot to continue to operate until the person actually stretches his or her arm towards the robot. This allows for a much tighter coupling between the actions of the machine and the actions of the human, which provides flexibility in many applications and saves space on the factory floor, which is always at a premium.

Because human safety is at stake, guarding equipment (particularly the electronic versions) must comply with stringent industry standards regarding functional safety, such as IEC 61508 and ISO 13849. These standards specify failure rates for hardware components and rigorous development practices for both hardware and software components; a system is considered safe for use in an industrial setting only when the hardware and software components comply with the standards. Standards-compliant systems must ensure that dangerous conditions and system failures can be detected with very high probability, and that the system responds to such events by transitioning the equipment being controlled into a safe state. For example, safety systems may be tuned to favor false positives over false negatives in order to avoid hazardous consequences resulting from the false negatives.

Separation of humans and machines, however, is not always optimal for productivity. For example, some tasks are best performed by a human and machine working collaboratively; machines typically provide more strength, faster speed, more precision, and more repeatability, while humans may offer flexibility, dexterity, and judgment far beyond the abilities of even the most advanced machines. An example of a potential collaborative application is the installation of a dashboard in a car—the dashboard is heavy and difficult for a human to maneuver but easy for a machine, and attaching it requires a variety of connectors and fasteners that require human dexterity and flexibility to handle correctly. Conventional guarding technology, however, is insufficiently flexible and adaptable to allow this type of collaboration. Therefore, these situations are typically resolved either by automating aspects of the task best performed by a human, often at great expense and complication, or using a human worker to perform aspects of the task better done by a robot (perhaps using additional equipment such as lift-assist devices) and tolerating potentially slow, error-prone, and inefficient execution that may lead to repetitive stress injuries or exposure to hazardous situations for human workers.

Although improved guarding based on 3D sensing may enable industrial engineers to design processes where each subset of the task is optimally assigned to a human or a machine without sacrificing the safety of human workers, several challenges inherently exist in using the 3D sensors in a safety-critical environment. First, the sensor itself must meet functional safety standards. In addition, the raw output of a 3D sensor cannot be used directly in most applications since it is much richer and harder to analyze than the data provided by 2D sensors. 3D sensor data thus requires processing in novel ways to generate effective and reliable control outputs for industrial machinery. Another challenge with systems based on 3D data is the difficulty in configuring and registering the systems and 3D sensors. In fact, even with 2D sensors, configuring safety guarding can be challenging. First, specific zones are usually designed and configured for each use case, taking into account the specific hazards posed by the machinery, the possible actions of humans in the workspace, the workspace layout, and the location and field of view of each individual sensor. It can be difficult to calculate the optimal shapes of exclusion zones, especially when trying to preserve safety while maximizing available floor space and system throughput.

Thus, configuring guarding technology requires advanced skill sets or tools. Mistakes in the configuration can result in serious safety hazards, requiring significant overhead in design and testing. All of this work must be completely redone if any changes are made to the workspace. The extra degree of freedom presented by 3D systems/sensors results in a much larger set of possible configurations and hazards, thereby requiring higher levels of data processing in order to generate useful, reliable control outputs from raw 3D sensor data. Accordingly, there is a need for approaches that reliably monitor a workspace for providing human safety to operate around the machinery, while reducing the required processing time and complexity of the data acquired by the 3D sensors.

SUMMARY

Various embodiments of the present invention provide systems and methods for monitoring a workspace for safety purposes using 3D sensors that are registered with respect to each other and with respect to one or more pieces of machinery under control. As used herein, the term “register” refers to the process of estimating the relative pose of an object (e.g., a sensor) with respect to one or more other objects (e.g., a robot, the floor, other sensors, etc.). The goal of “registration” is to specify this relationship in terms of a rigid-body transformation with respect to a reference frame.

Registration among the sensors may be established based on one or more 3D images of the workspace acquired by the sensors when there is sufficient overlap and/or distinction between the acquired images. For example, conventional computer-vision techniques (e.g., global registration algorithms) and a fine registration approach (e.g., an ICP algorithm) may be implemented to perform registration among the sensors. If there is insufficient overlap between the fields of the sensors and/or insufficient details in the workspace are provided in the acquired images, one or more registration objects having distinctive signatures in 3D may be utilized for sensor registration. Alternatively, each sensor may record images of one or more people, moving equipment or other registration object(s) standing in the workspace or passing throughout the workspace over a period of time; when a sufficient number of at least partially matching images are acquired, the images may be combined and processed to establish the sensor registration. After the sensor registration is complete, a common reference frame of the sensors may then be transformed to a global reference frame of the workspace such that the data acquired by the sensor can be processed in the global frame.

In various embodiments, after the sensors are registered among themselves, the sensors are registered to machinery in the workspace. The registration can be established using the machinery and/or a registration target having a distinctive 3D signature and a related pose with respect to the machinery. For example, the sensors may first register to the registration target; and then based on this registration and the related pose of the registration target to the machinery, the sensors may register to the machinery. In some embodiments, an image of the scene in the workspace viewed by the sensors is provided on a user interface. In addition, a 2D or 3D model of the machinery and/or the workspace created using computer-aided design (CAD) and/or scanning of the actual machinery and/or workspace may be displayed on the image of the scene. One or more pairs of discrete features and/or constraints in the image of scene may then be selected manually by the operator or automatically by a control system to establish the registration between the sensors and the machinery. In various embodiments, automated registration of the sensors to the machinery involves use of a registration library including one or more configuration parameters (e.g., a number of iterations for fine-tuning the registration, a 3D point cloud density, mesh density, one or more convergence criteria, etc.) that are established in previous setups of the sensors and machinery in the workspace. In one embodiment, the state of the robot(s) and/or machinery in the image of the scene is compared against that of the robot(s) and/or machinery in the stored images of the scene in the registration library; an image that provides the best matching state in the registration library can be identified. Subsequently, the configuration parameter(s) associated with the best-matched state in the image of the scene can be retrieved, and based thereon, registration of the sensors to the machinery may be established.

During operation of the machinery, registration among sensors and between the sensors and machinery can be continuously monitored in real time. For example, a set of metrics (e.g., registration validation, real-time robot tracking, etc.) capturing the fit accuracy of the observed data to a model of static elements in the workspace may be created during the registration process. Upon completion of the registration and as the system operates, the metrics may be continuously monitored and updated in real time. If the metrics or deviations thereof from their initial values (i.e., obtained during initial registration) exceed a specified threshold, the registration during the system operation may be considered to be invalid and an error condition may be triggered. Subsequently, the machinery under operation may be shut down or transitioned to a safe state. In addition, the signals acquired by the sensors during operation of the machinery may be continuously analyzed. If the sensors remain in position but the fields of view are obscured or blocked, and/or the measured sensor signals are degraded, the machinery may be transitioned to a safe state as well. Accordingly, various embodiments provide approaches that reliably monitor the workspace for providing human safety to operate around the machinery.

Accordingly, in one aspect, the invention relates to a method of ensuring safe operation of industrial machinery in a workcell. In various embodiments, the method comprises the steps of disposing a plurality of image sensors proximate to the workcell and acquiring, with at least some of the image sensors, a first plurality of images of the workcell; registering the sensors to each other based at least in part on the first plurality of images and, based at least in part on the registration, converting the first plurality of images to a common reference frame of the sensors; determining a transformation matrix for transforming the common reference frame of the sensors to a global frame of the workcell; registering the plurality of sensors to the industrial machinery; acquiring a second plurality of images during operation of the industrial machinery; and monitoring the industrial machinery during operation thereof based at least in part on the acquired second plurality of images, transformation, and registration of the sensors to the industrial machinery. In one embodiment, the method further includes implementing a global-optimization algorithm to register (i) the multiple sensors to each other and (ii) the multiple sensors to the industrial machinery.

The first plurality of images may be computationally analyzed to verify that there is sufficient overlap and sufficient distinction thereamong. In some embodiments, wherein the industrial machinery comprises at least a robot arm. The method may, in certain embodiments, further comprise providing at least one entity having a distinctive 3D signature in the workcell, the first plurality of images comprising images of the at least one entity.

In various embodiments, the method further comprises separately registering each of the sensors to the entity, and registering the sensors to each other based at least in part on the separate registration of each sensor to the entity. In some cases at least one of the sensors is visible to the entity, in which case the method may further comprise the steps of registering the at least one sensor to the entity, and registering the plurality of sensors to the industrial machinery based at least in part on the registration of the visible sensor to the entity, the registration of the sensors to each other and a related pose of the entity with respect to the industrial machinery. In addition, the method may further include receiving an external input (e.g., a user input or an input transmitted from a controller controlling the entity) for identifying a state (e.g., an orientation, a position, etc.) of the entity.

The method may further comprise the steps of providing an image of a scene in the workcell; determining one or more pairs of discrete features on the image of the scene; and registering the plurality of sensors to the industrial machinery based at least in part on the one or more pairs of discrete features. In various embodiments, the image of the scene comprises at least one of the first plurality of images; 3D point cloud data mapping the workcell; and/or a 2D or 3D CAD model of at least one of the industrial machinery or the workcell.

In some embodiments, the method further comprises performing a 2D or 3D scan on the industrial machinery or the workcell, where the image of the scene comprises a model of the industrial machinery or the workcell constructed based at least in part on the 2D or 3D scan. In some cases, prior to the registering step, a registration library comprising a plurality of images of the industrial machinery is established, with each image associated with at least one configuration parameter. A state of the industrial machinery in the image of the scene may be computationally compared against states of the industrial machinery in the plurality of images in the registration library, and the image in the registration library providing the best matching state of the industrial machinery to the state of the industrial machinery in the image of the scene is identified. The plurality of sensors may then be registered to the industrial machinery based at least in part on the configuration parameter corresponding to the identified image in the registration library. The configuration parameter may, for example, comprise a number of iterations for fine-tuning the registration of the sensors to the industrial machinery, a number of 3D point cloud data per mesh, and/or a convergence criterion.

In various embodiments, the method further comprises the steps of analyzing the first plurality of images to determine an area in the workcell covered by fields of view of the sensors and, based on the analysis, identifying at least one of the determined area, areas not covered by the fields of the view of the sensors, a pose for at least one of the sensors for achieving an optimal scene coverage, or a placement location for an additional sensor. Based on the identified pose, the pose of the corresponding sensors may be adjusted.

The method may further comprise the step of projecting into the workcell a signal or one or more light beams that outline the area covered by the fields of view of the sensors. Alternatively or in addition, the method may comprise the step of projecting onto an augmented reality or virtual reality device an image of the workcell and the outline of the area covered by the fields of view of the sensors.

The method may, in various embodiments, further comprise generating an initial accuracy metric indicating an accuracy level of the registration of the plurality of sensors to the industrial machinery, and then, during operation of the industrial machinery, determining whether a subsequent accuracy metric indicating an accuracy level of the registration deviates from the initial accuracy metric by more than a threshold amount, and if so, altering operation of the industrial machinery. The latter step may comprise periodically analyzing the second plurality of images acquired during operation of the industrial machinery to (i) regenerate the accuracy metric, (ii) compare the regenerated accuracy metric to the initial accuracy metric to determine a deviation therebetween, and (iii) alter operation of the machinery if the deviation exceeds a threshold value. The metric may comprise at least one of registration validation or real-time robot tracking.

In another aspect, the invention pertains to a control system for ensuring safe operation of industrial machinery in a workcell. In various embodiments, the system comprises a plurality of image sensors proximate to the workcell; and a controller configured to acquire, with at least some of the image sensors, a first plurality of images of the workcell; register the sensors to each other based at least in part on the first plurality of images and, based at least in part on the registration, convert the first plurality of images to a common reference frame of the sensors; determine a transformation matrix for transforming the common reference frame of the sensors to a global frame of the workcell; register the plurality of sensors to the industrial machinery; acquire a second plurality of images during operation of the industrial machinery; and monitor the industrial machinery during operation thereof based at least in part on the acquired second plurality of images, transformation, and registration of the sensors to the industrial machinery. In one embodiment, the controller is further configured to implement a global-optimization algorithm to register (i) the multiple sensors to each other and (ii) the multiple sensors to the industrial machinery.

The controller may be further configured to computationally analyze the first plurality of images to verify that there is sufficient overlap and sufficient distinction thereamong. In some embodiments, the industrial machinery includes at least a robot arm. In addition, the control system may further include one or more entities having a distinctive 3D signature in the workcell; the first plurality of images includes images of the entity/entities.

In various embodiments the controller is further configured to separately register each of the sensors to the entity; and register the sensors to each other based at least in part on the separate registration of each sensor to the entity. In some cases one or more sensors are visible to the entity, in which case the controller may be further configured to register the sensor(s) to the entity; and register the multiple sensors to the industrial machinery based at least in part on the registration of the visible sensor(s) to the entity, the registration of the sensors to each other and a related pose of the entity with respect to the industrial machinery. In addition, the system may further include the second controller for controlling the entity and an input module for receiving an external input (e.g., a user input or an input transmitted from the second controller) for identifying a state (e.g., an orientation, a position, etc.) of the entity.

The controller may be further configured to provide an image of a scene in the workcell; determine one or more pairs of discrete features on the image of the scene; and register the multiple sensors to the industrial machinery based at least in part on the one or more pairs of discrete features. In various embodiments, the image of the scene includes at least one of the first plurality of images; 3D point cloud data mapping the workcell; and/or a 2D or 3D CAD model of the industrial machinery and/or the workcell.

In some embodiments, the controller is further configured to cause a 2D or 3D scan on the industrial machinery or the workcell; the image of the scene includes a model of the industrial machinery or the workcell constructed based at least in part on the 2D or 3D scan. In some cases, the controller is further configured to, prior to the registering step, establish a registration library including multiple images of the industrial machinery, each associated one or more configuration parameters; computationally compare a state of the industrial machinery in the image of the scene against states of the industrial machinery in the multiple images in the registration library; identify one of the multiple images in the registration library providing a best matching state of the industrial machinery to the state of the industrial machinery in the image of the scene; and register the multiple sensors to the industrial machinery based at least in part on the configuration parameter(s) corresponding to the identified image in the registration library. The configuration parameter(s) may, for example, include a number of iterations for fine-tuning the registration of the sensors to the industrial machinery, a number of 3D point cloud data per mesh, and/or a convergence criterion.

In various embodiments, the controller is further configured to analyze the first plurality of images to determine an area in the workcell covered by fields of view of the sensors; and based on the analysis, identify the determined area, areas not covered by the fields of the view of the sensors, a pose for at least one of the sensors for achieving an optimal scene coverage, and/or a placement location for an additional sensor. In addition, the controller may be further configured to cause the pose of the corresponding sensors to be adjusted based on the identified pose.

The controller may be further configured to project, into the workcell, a signal or one or more light beams that outline the area covered by the fields of view of the sensors. Alternatively or additionally, the controller may be further configured to project, onto an augmented reality or virtual reality device, an image of the workcell and the outline of the area covered by the fields of view of the sensors.

The controller, in various embodiments, is further configured to generate an initial accuracy metric indicating an accuracy level of the registration of the multiple sensors to the industrial machinery; and then, during operation of the industrial machinery, determine whether a subsequent accuracy metric indicating an accuracy level of the registration deviates from the initial accuracy metric by more than a threshold amount, and if so, alter operation of the industrial machinery. In the later step, the controller may be further configured to periodically analyze the second plurality of images acquired during operation of the industrial machinery to (i) regenerate the accuracy metric, (ii) compare the regenerated accuracy metric to the initial accuracy metric to determine a deviation therebetween, and (iii) alter operation of the machinery if the deviation exceeds a threshold value. The metric may include registration validation and/or real-time robot tracking.

As used herein, the term “substantially” means±10%, and in some embodiments, ±5%. Reference throughout this specification to “one example,” “an example,” “one embodiment,” or “an embodiment” means that a particular feature, structure, or characteristic described in connection with the example is included in at least one example of the present technology. Thus, the occurrences of the phrases “in one example,” “in an example,” “one embodiment,” or “an embodiment” in various places throughout this specification are not necessarily all referring to the same example. Furthermore, the particular features, structures, routines, steps, or characteristics may be combined in any suitable manner in one or more examples of the technology. The headings provided herein are for convenience only and are not intended to limit or interpret the scope or meaning of the claimed technology.

BRIEF DESCRIPTION OF THE DRAWINGS

In the drawings, like reference characters generally refer to the same parts throughout the different views. Also, the drawings are not necessarily to scale, with an emphasis instead generally being placed upon illustrating the principles of the invention. In the following description, various embodiments of the present invention are described with reference to the following drawings, in which:

FIG. 1 is a perspective view of a monitored workspace in accordance with various embodiments of the present invention;

FIG. 2 schematically illustrates a control system in accordance with various embodiments of the present invention;

FIG. 3 is a flow chart illustrating an approach for registering sensors among themselves in accordance with various embodiments of the present invention;

FIGS. 4A-4C are flow charts illustrating exemplary approaches for registering one or more sensors to machinery in a workspace in accordance with various embodiments of the present invention;

FIGS. 5A and 5B are flow charts illustrating exemplary approaches for configuring sensors to appropriately cover a scene in a workspace in accordance with various embodiments of the present invention; and

FIG. 6 is a flow chart illustrating an approach for validating registrations among sensors and between the sensors and machinery during operation of machinery in accordance with various embodiments of the present invention.

DETAILED DESCRIPTION

A. Workspace

Refer first to FIG. 1 , which illustrates a representative 3D workspace 100 monitored by a sensor system 101 including one or more sensors representatively indicated at 102 ₁, 102 ₂, 102 ₃. The sensors 102 ₁₋₃ may be conventional optical sensors such as cameras, e.g., 3D time-of-flight cameras, stereo vision cameras, or 3D LIDAR sensors or radar-based sensors, ideally with high frame rates (e.g., between 30 Hz and 100 Hz). The mode of operation of the sensors 102 ₁₋₃ is not critical so long as a 3D representation of the workspace 100 is obtainable from images or other data obtained by the sensors 102 ₁₋₃. As shown in the figure, sensors 102 ₁₋₃ may collectively cover and can monitor the workspace 100, which includes a robot 106 controlled by a conventional robot controller 108. The robot 106 interacts with various workpieces W, and a human operator H in the workspace 100 may interact with the workpieces W and the robot 106 to perform a task. The workspace 100 may also contain various items of auxiliary equipment 110. As used herein the robot 106 and auxiliary equipment 110 are denoted as machinery in the workspace 100.

In various embodiments, data obtained by each of the sensors 102 ₁₋₃ is transmitted to a control system 112. In addition, the sensors 102 ₁₋₃ may be supported by various software and/or hardware components 114 ₁₋₃ for changing the configurations (e.g., orientations and/or positions) of the sensors 102 ₁₋₃; as further described below, the control system 112 may be configured to adjust the sensors so as to provide optimal coverage of the monitored area in the workspace 100. The volume of space covered by each sensor—typically a solid truncated pyramid or solid frustum—may be represented in any suitable fashion, e.g., the space may be divided into a 3D grid of small (5 cm, for example) cubes or “voxels” or other suitable form of volumetric representation. For example, a 3D representation of the workspace 100 may be generated using 2D or 3D ray tracing, where the intersections of the 2D or 3D rays emanating from the sensors 102 ₁₋₃ are used as the volume coordinates of the workspace 100. This ray tracing can be performed dynamically or via the use of precomputed volumes, where objects in the workspace 100 are previously identified and captured by the control system 112. For convenience of presentation, the ensuing discussion assumes a voxel representation, and the control system 112 maintains an internal representation of the workspace 100 at the voxel level.

FIG. 2 illustrates, in greater detail, a representative embodiment of the control system 112, which may be implemented on a general purpose computer. The control system 112 includes a central processing unit (CPU) 205, system memory 210, and one or more non-volatile mass storage devices (such as one or more hard disks and/or optical storage units) 212. The control system 112 further includes a bidirectional system bus 215 over which the CPU 205, functional modules in the memory 210, and storage device 212 communicate with each other as well as with internal or external input/output (I/O) devices, such as a display 220 and peripherals 222 (which may include traditional input devices such as a keyboard or a mouse). The control system 112 also includes a wireless transceiver 225 and one or more I/O ports 227. The transceiver 225 and I/O ports 227 may provide a network interface. The term “network” is herein used broadly to connote wired or wireless networks of computers or telecommunications devices (such as wired or wireless telephones, tablets, etc.). For example, a computer network may be a local area network (LAN) or a wide area network (WAN). When used in a LAN networking environment, computers may be connected to the LAN through a network interface or adapter; for example, a supervisor may establish communication with the control system 112 using a tablet that wirelessly joins the network. When used in a WAN networking environment, computers typically include a modem or other communication mechanism. Modems may be internal or external, and may be connected to the system bus via the user-input interface, or other appropriate mechanism. Networked computers may be connected over the Internet, an Intranet, Extranet, Ethernet, or any other system that provides communications. Some suitable communications protocols include TCP/IP, UDP, or OSI, for example. For wireless communications, communications protocols may include IEEE 802.11x (“Wi-Fi”), Bluetooth, ZigBee, IrDa, near-field communication (NFC), or other suitable protocol. Furthermore, components of the system may communicate through a combination of wired or wireless paths, and communication may involve both computer and telecommunications networks.

The CPU 205 is typically a microprocessor, but in various embodiments may be a microcontroller, peripheral integrated circuit element, a CSIC (customer-specific integrated circuit), an ASIC (application-specific integrated circuit), a logic circuit, a digital signal processor, a programmable logic device such as an FPGA (field-programmable gate array), PLD (programmable logic device), PLA (programmable logic array), RFID processor, graphics processing unit (GPU), smart chip, or any other device or arrangement of devices that is capable of implementing the steps of the processes of the invention.

The system memory 210 may contain a series of frame buffers 235, i.e., partitions that store, in digital form (e.g., as pixels or voxels, or as depth maps), images obtained by the sensors 102 ₁₋₃; the data may actually arrive via I/O ports 227 and/or transceiver 225 as discussed above. The system memory 210 contains instructions, conceptually illustrated as a group of modules, that control the operation of CPU 205 and its interaction with the other hardware components. An operating system 240 (e.g., Windows or Linux) directs the execution of low-level, basic system functions such as memory allocation, file management and operation of the mass storage device 212. At a higher level, and as described in greater detail below, an imaging module 242 may register the images acquired by the sensors in the frame buffers 235; an analysis module 237 may analyze the images acquired by the sensors 102 ₁₋₃ to determine, for example, whether there is sufficient overlap and/or distinction between the acquired images and/or the coverage area monitored by the sensors 102 ₁₋₃; a registration module 239 may register the sensors among themselves based on the images registered in the frame buffers 235 and/or register the sensors 102 ₁₋₃ to the machinery in the workspace as further described below; and an input module 241 for receiving one or more external input data from, for example, the display 220, the peripherals 222, the robot controller 108 and/or additional sensors (e.g., other than the sensors 102 ₁₋₃) for identifying a state (e.g., an orientation, a position, etc.) of the robot 106 and/or one or more registration objects as further described below. The determined coverage area may be stored in a space map 245, which contains a volumetric representation of the workspace 100 with each voxel (or other unit of representation) labeled, within the space map, as described herein. Alternatively, the space map 245 may simply be a 3D array of voxels, with voxel labels being stored in a separate database (in memory 210 or in mass storage 212).

In addition, the control system 112 may communicate with the robot controller 108 to control the operation or machinery in the workspace 100 using conventional control routines collectively indicated at 250. As explained below, the configuration of the workspace may well change over time as persons and/or machines move about; the control routines 250 may be responsive to these changes in operating machinery to achieve high levels of safety. All of the modules in system memory 210 may be coded in any suitable programming language, including, without limitation, high-level languages such as C, C++, C#, Java, Python, Ruby, Scala, and Lua, utilizing, without limitation, any suitable frameworks and libraries such as TensorFlow, Keras, PyTorch, or Theano. Additionally, the software can be implemented in an assembly language and/or machine language directed to the microprocessor resident on a target device

B. Sensor Registration and Monitoring

The sensor system 101 is implemented to monitor the workspace 100, and the guarding mechanism is generally configured with respect to dangerous machinery (e.g., the robot 106), as opposed to the sensors 102 ₁₋₃. In a multi-sensor system, a registration among the sensors 102 ₁₋₃ that correlates the precise location of each sensor 102 with respect to all other sensors is typically established during setup and/or during operation of the machinery. In one embodiment, the sensor registration is performed manually. For example, the human operator H may measure distances between the focal points of the sensors and the machinery being controlled in three dimensions and manually manipulate the poses (e.g., positions and/or orientations) of the sensors 102 ₁₋₃ based thereon so as to provide an optimal coverage area in the workspace 100. Additionally or alternatively, a user interface shown in the display 220 may, for example, provide alignment points of the sensors 102 ₁₋₃ and a signal to indicate optimal sensor positioning to maximize signal quality and reliability, determine and display metrics for registration reliability and safety signals, and provide user feedback. The operator H may then adjust the pose of the sensor 102 ₁₋₃ based on the user feedback. While it is possible for sensor registration to be achieved manually, it may be burdensome even for a single sensor, and unrealistic for providing sufficiently accurate measurements to combine information from multiple sensors. Therefore, in various embodiments, the sensor registration is performed automatically using suitable computer-vision techniques. As further described below, approaches for registering multiple sensors 102 ₁₋₃ in the workspace 100 are sufficiently simple so as to allow for ease of setup and reconfiguration.

1) Registration Among Sensors

Assuming for simplicity that each frame buffer 235 stores an image (which may be refreshed periodically) from a particular sensor 102, the registration module 239 may perform registration among the sensors 102 ₁₋₃ by comparing all or part of the image from each sensor to the images from other sensors in the frame buffers 235, and using conventional computer-vision techniques (e.g., global-registration algorithms) to identify correspondences in those images. Suitable global-registration algorithms, which do not require an initial registration approximation, generally fall into two categories: feature-based methods and intensity-based methods. Feature-based methods, such as random sample consensus (RANSAC), may extract features (e.g., edges) in the images and then identify correspondences based on the extracted image features; intensity-based methods may determine image intensities in the images and then use correlation metrics to compare the intensity patterns. Once an approximate or gross registration is performed, a fine registration approach (e.g., an iterative closest point (ICP) algorithm or suitable variant thereof) may be performed to fine-tune the registration and complete the sensor registration among themselves. Thereafter, the data acquired by the sensors 102 ₁₋₃ can be processed in a common reference frame (e.g., in the same coordinate system) based on the registration.

In various embodiments, the common reference frame of the sensors 102 ₁₋₃ is transformed to a “global” frame (e.g., a coordinate system) of the workspace 100. For example, to convert the images acquired by the sensors 102 ₁₋₃ in a common 2D frame to 3D data in the global frame of the workspace 100, a 2D range image in the frame buffer 235 may be transformed to a sensor-local 3D coordinate system by undistorting the image coordinates of each range pixel and applying an inverse projection transformation to the undistorted image coordinates and a range measurement. This generates a structured point cloud in the sensor-local coordinate system, which may be transformed using a suitable rigid-body transformation. Referring again to FIG. 1 , in one embodiment, the transformation is determined using one or more “registration objects” 120 having distinctive visual signatures in 3D. For example, the registration object(s) may be placed in a location within the workspace where it can be seen by all sensors or at least one sensor that is registered with respect to the others. By acquiring images of the registration object(s) using the registered sensor(s) 102 ₁₋₃ and based on the known signature(s) and/or geometries of the registration object(s), the transformation that transforms data in the common frame of the sensors 102 ₁₋₃ to the data in the global frame of the workspace 100 may be computed. Thereafter, the data acquired by the sensors 102 ₁₋₃ can be processed in the global frame of the workspace 100.

The above-described approaches for sensor registration are suitable when there is sufficient overlap between the fields of view of the sensors 102 ₁₋₃ and sufficient visual detail in the workspace 100 to provide distinct sensor images. If, however, there is insufficient overlap between the fields of the sensors 102 ₁₋₃ and/or insufficient detail in the workspace 100, use of one or more registration objects 120 having distinctive signatures in 3D may be necessary to facilitate sensor registration. For example, each sensor 102 may be first separately registered to the registration object(s); registration among the sensors 102 ₁₋₃ may then be established based on the registration between each sensor 102 and the registration object(s) 120. As used herein, the term “distinctive 3D signature” refers to a uniquely identifiable position and pose (and so free of rotational or translational symmetry), e.g., presenting a detectably different profile when viewed from different angles. For example, while a single cube has six potential orientations, two cubes at a known distance and non-collinear orientation with respect to each other may provide sufficient information for a distinctive 3D signature. More generally, the registration object(s) may include, for example, fiducials or other 2D or 3D objects, and may be stationary or carried around by the human operator H and/or machinery (e.g., on the robot) in the guarded workspace 100.

Alternatively, registration among the sensors 102 ₁₋₃ may be achieved by having each of the sensors 102 ₁₋₃ record images of one or more people, moving equipment (such as automated guided vehicles) or other registration object(s) 120 standing in the workspace or passing through the workspace over a period of time; when a sufficient number of at least partially matching images are acquired, the images may be combined and processed to establish an accurate sensor registration using the approaches described above.

Occasionally, the data collected from the sensors 102 ₁₋₃ may be noisy or optically distorted; thus, in some embodiments, suitable techniques, such as sub-frame combination, noise reduction, meshing and resampling, etc. may be implemented to minimize (or at least reduce) the noise inherent in the sensor signals, thereby improving accuracy of sensor registration. In addition, the detected sensor signals may be corrected using conventional approaches based on average or distribution estimation so as to maintain sensor alignment. In one embodiment, the noise and distortion correction process bounds the errors inherent in the detected signals and registration process. The error bounds can be used as inputs to the control system 112 during operation of the robot 106 to ensure human safety. For example, if the noise or distortion of the signals detected by the sensors 102 ₁₋₃ during operation of the robot 106 exceeds the error bounds and/or the robotic system drifts outside the error bounds during operation, the control system 112 may automatically communicate with the robot controller 108 so as to switch the machinery in the workspace 100 to a safe state (e.g., having a reduced speed or being deactivated).

In various embodiments, a global-optimization algorithm is implemented to estimate the optimal configuration or pose of each sensor in the coordinate system of the workspace 100 by minimizing a global error metric. The use of a global optimization algorithm ensures the best sensor configuration estimate regardless of the initial configuration or estimates thereof. For example, given a set of correspondences, one common approach is to minimize the sum of pairwise (typically Euclidean) distances. In such cases the cost for optimization purposes is taken as the distance. Other distance-based costs such as “Hausdorff” distance are common for alignment tasks. Where no correspondences can be identified, these may be estimated through refinement of a good guess using nearest neighbor or projections into depth images. Global pose estimation without correspondences is more challenging and the cost function becomes more abstract, e.g., a search for viable poses via branch-and-bound algorithms or sampling of point sets to find minimal functioning correspondence sets using, e.g., the RANSAC algorithm or similar approaches.

FIG. 3 is a flow chart illustrating an exemplary approach 300 for registering sensors among themselves. In a first step 302, each of the sensors 102 ₁₋₃ may acquire one or more images of the workspace; the images may be stored in the frame buffer 235 in memory 210. In a second step 304, suitable techniques may be optionally implemented to minimize (or at least reduce) the noise and/or correct distortions in the detected sensor signals. In a third step 306, the analysis module 237 may analyze the images to determine whether there is sufficient overlap and/or distinction between the acquired images. If so, the registration module 239 may implement conventional computer-vision techniques (e.g., global registration algorithms) and a fine registration approach (e.g., an ICP algorithm) to establish registration among the sensors 102 ₁₋₃ (step 308). If there is insufficient overlap between the fields of the sensors 102 ₁₋₃ and/or insufficient details in the workspace 100, one or more registration objects 120 having distinctive signatures in 3D may be identified (step 310). Each sensor 102 may be first separately registered to the registration object(s) (step 312). Subsequently, the registration among the sensors 102 ₁₋₃ may then be established based on the registration between each sensor 102 and the registration object(s) 120 (step 310). Alternatively, each sensor may record images of one or more people, moving equipment or other registration object(s) 120 standing in the workspace or passing throughout the workspace over a period of time (step 314). When a sufficient number of at least partially matching images are acquired, the images may be combined and processed to establish an accurate sensor registration (step 316). Optionally, after registration, the common reference frame of the sensors 102 ₁₋₃ may be transformed to a global frame of the workspace 100 (step 318).

2) Registration of Sensors to Machinery

Registration of the sensors 102 ₁₋₃ to the machinery under control in the workspace 100 can, in some cases, be achieved without any additional instrumentation, especially when the machinery has a distinctive 3D signature (e.g., a robot arm) and/or when the machinery is visible to at least one sensor 102 that is registered with respect to the other sensors as described above. The sensor(s) 102 to which the machinery is visible may first register to the machinery; based on this registration and the registration among the sensors 102 ₁₋₃, other sensors to which the machinery is invisible may then register to the machinery. Alternatively, a registration target (e.g., the registration object 120 having a distinctive 3D signature) in the workspace 100 may be utilized to register the sensors 102 ₁₋₃ to the machinery. Generally, the registration target is specially designed such that it is straightforward for the human operator H to determine the pose of the registration target with respect to the machinery. Again, the sensors 102 ₁₋₃ may then be registered to the machinery via registration of the sensors 102 ₁₋₃ to the registration target and the pose of the registration target relative to the machinery.

In various embodiments, the user interface shown on the display 220 may provide an image of the scene in the workspace 100 to allow the human operator H to manually designate certain parts of the image as key elements of the machinery under control. The registration of the sensors 102 ₁₋₃ to the machinery may then be performed using the user-designated key elements. The image of the scene may include the actual scene viewed by the sensors 102 ₁₋₃ or one or more additional sensors (e.g., RGB cameras) employed in the workspace 100. In addition, the image of the scene may include visible 3D point cloud data mapping the workspace 100. In one embodiment, the image of the scene includes geometry of at least a portion of the registration target. For example, the geometry may include a 2D or 3D CAD model of the machinery (e.g., the robot) and/or the workspace 100. Additionally or alternatively, the geometry may include a model of the actual machinery and/or workspace constructed based on a 2D and/or 3D scan captured by the sensors 102 ₁₋₃ (and/or other similar sensors), machinery or other equipment in the workspace 100. In cases where the robot 106 and/or other machinery controlled by the robot controller 108 is used as the registration target, the position of the robot and/or other machinery in the workspace 100 received and determined by the robot controller 108 may be combined with the CAD model thereof to obtain the fully posed geometry corresponding to the state of the workspace 100. In addition, the robot controller 108 and/or the control system 112 may continuously monitor the position of the robot and/or other machinery to ensure that no undesirable movement occurs while the scan data are acquired and accumulated.

The CAD model may be imprecise; thus, in some embodiments, various suitable techniques can be implemented to improve fit and quality of the CAD model. For example, floors and walls outside of a workcell (enclosing, for example, the machinery under control and the human operator H) in the workspace 100 may be excluded from the image of the scene and/or the CAD model to improve the registration accuracy. In one embodiment, the CAD model is simplified by taking out or deleting extraneous model components that do not contribute to registration; alternatively, the CAD model may be simplified into its minimum components, such as a stick figure. In some embodiments, the data acquired by the sensors 102 ₁₋₃ can be used to improve the accuracy of the 2D or 3D CAD model by incorporating, for example, robot dress packages and/or end effectors as part of the model. In one embodiment, the 2D or 3D CAD model can also be overlaid on top of the point cloud data or visual image acquired by the sensors 102 ₁₋₃ on the user interface shown on the display 220 as an alignment aid.

It should be noted that the geometry of the machinery used for registration is not necessarily the same one used for collision avoidance. Typically, collision geometry includes cabling and a dress package associated with the machinery and is biased towards inclusion for safety. On the other hand, registration geometry is unbiased, with different resolution and precision requirements, excludes non-rigid regions, and may have to exclude regions that provide unreliable measurements (e.g., dark or overly reflective surfaces or components that are thin and hard to measure). As described above, in some embodiments, the registration geometry of the registration target and/or workcell is constructed by scanning the actual registration target and/or workcell using the same or similar sensors as the ones that are used to perform registration (as opposed to the CAD model). This may lead to more reliable reference geometry that is not subject to deviations between the CAD model and the actual manufactured parts of the robot, whether intended or accidental.

The alignment/registration of the sensor system 101 to the machinery can be performed manually through the user interface. For example, the user may use a keyboard input, a mouse, a joystick or other suitable tools to specify the pose of each sensor, a group of sensors with known poses with respect to each other and/or with respect to the machinery shown on the display 220. This process can be automated or semi-automated. Yet another option to perform the alignment/registration is to select pairs of discrete features in the depth image and on the robot 106 shown on the user interface on the display 220, followed by an automated or semi-automated refinement step. For example, the human operator H or the registration module 239 may introduce a constraint by picking a single pair of features, and then trigger automatic registration of the sensor system 101 to the machinery in the presence of the constraint (i.e., ensuring the constraint to be satisfied); the constraint may improve reliability of the registration. In some embodiments, two constraints are added manually by the operator H or automatically by the registration module 239; this may further restrict the search space and make the automatic registration even more robust. Selecting three pairs of features may allow skipping a search for coarse feature correspondences, and instead going directly to the refinement step (such as using the ICP algorithm discussed above), thereby providing a reliable and accurate registration.

Referring again to FIG. 2 , in various embodiments, automated registration of the sensors 102 ₁₋₃ to the machinery involves use of a registration library 255; the registration library 255 includes one or more configuration parameters (such as a number of iterations for fine-tuning the registration, a number of 3D point cloud data per mesh, one or more convergence criteria, etc.) that are established in previous setups of the sensor system 101 and machinery in the workspace 100. Typically, each configuration parameter in the registration library 255 is established for a particular spatial arrangement of one or more specific robots 106, machinery, hardware configuration, and/or sensors 102 ₁₋₃ in the workspace 100, and is stored along and in association with the respective image of the scene in the memory 210. In one embodiment, the control system 112 (e.g., the registration module 239) automatically compares the state (e.g., the orientation, position, etc.) of the robot(s) and/or machinery in the image of the scene against that of the robot(s) and/or machinery in the stored images of the scene in the registration library 255 and then identifies a stored image that provides the best matching state. The control system 112 (e.g., the registration module 239) may then retrieve the configuration parameter(s) associated with the best-matched state in the image of the scene, and based thereon, perform automated registration of the sensors 102 ₁₋₃ to the machinery.

Occasionally, a single state of the robot or other machinery in the workspace 100 may not provide a registration target that adequately constrains all degrees of freedom (because, for example, not all sensors 102 ₁₋₃ can observe the robot 106 in its current configuration and/or the robot features observed by the sensors 102 ₁₋₃ are not sufficiently distinctive as described above); in various embodiments, the robot 106 and/or other machinery can be re-posed to one or more additional known states (e.g., the states that have been successfully set up previously for registration), either manually or automatically by the robot controller 108 and the control system 112 running a predetermined program. Data related to the state(s) of the robot 106 and/or other machinery and the data acquired by the sensors 102 ₁₋₃ during this procedure can be combined to provide a larger registration data set that provides a more reliable and precise registration. In one embodiment, the combined data may be compared against the data stored in the registration library 255 so as to allow automated registration of the sensors 102 ₁₋₃ to the machinery as described above. In addition, the data acquired during re-posing of the robot 106 and/or other machinery to the additional known state(s) may be stored in the registration library 255 for further comparison.

FIGS. 4A-4C are flow charts illustrating exemplary approaches for registering one or more sensors to machinery in a workspace. Referring first to FIG. 4A, in a first step 402, the machinery under control in the workspace is analyzed by, e.g., the control system 112, to determine whether it has a distinctive 3D signature and/or is visible to at least one sensor that is registered with respect to the other sensors. For example, if the images acquired by the sensors 102 ₁₋₃ indicate that the machinery does not have rotational or translational symmetry in at least one dimension (e.g., a different profile of the machinery is presented when being viewed from a different angle), the machinery is determined to have a distinctive 3D signature. If so, the registration module 239 may first register to the machinery the sensor(s) 102 to which the machinery is visible (step 404). Based on the registration performed in step 404 and the registration among the sensors 102 ₁₋₃, the registration module 239 may then register to the machinery other sensors to which the machinery is invisible (step 406). If the machinery does not have a distinctive 3D signature and/or is invisible to any sensors that are registered with respect to the other sensors, the registration module 239 may identify a registration target having distinctive signatures in 3D in the workspace (based on, for example, the images acquired by the sensor(s)) and determine the pose of the registration target with respect to the machinery (step 408). Subsequently, the registration module 239 may register the sensors 102 ₁₋₃ to the registration target (step 410), and based on the registration in step 410 and the related pose of the registration target to the machinery, register the sensors 102 ₁₋₃ to the registration target (step 512).

Alternatively, referring to FIG. 4B, in various embodiments, an image of the scene in the workspace 100 viewed by the sensors 102 ₁₋₃ and/or additional sensor(s) is provided on a user interface shown on the display 220 (step 422). Optionally, the analysis module 237 may analyze the sensor images and provide visible 3D point cloud data mapping the workspace 100 on the image of the scene (step 424). In addition, the control system 212 may create a 2D or 3D CAD model of the machinery and/or the workspace 100 and display the model on the image of the scene (step 426). Additionally or alternatively, the sensors 102 ₁₋₃ (and/or other similar sensors), machinery or other equipment in the workspace 100 may perform a 2D and/or 3D scan on the actual machinery and/or workspace and construct a model thereof based on the scan (step 428). In one implementation, the position of the robot and/or other machinery in the workspace 100 received and determined by the robot controller 108 may be combined with the model created in step 426 or 428 to obtain the fully posed geometry thereof corresponding to the state of the workspace 100 (step 430). In various embodiments, one or more pairs of discrete features in the depth image and on the robot 106 shown on the user interface are selected manually by the operator or automatically by the control system 112 (step 432). Based thereon, the registration module 239 may perform registration using, for example, refinement steps described above (step 434). Additionally or alternatively, the registration module 239 may introduce one or more constraints by picking one or more pair of features on the image of the scene (step 436), and then performing automatic registration of the sensor system 101 to the machinery in the presence of the constraint(s) (step 438).

Referring to FIG. 4C, in various embodiments, automated registration of the sensors 102 ₁₋₃ to the machinery involves use of a registration library 255. In a step 442, a registration library 255 including one or more configuration parameters (such as a number of iterations for fine-tuning the registration, a number of 3D point cloud data per mesh, one or more convergence criteria, etc.) is created. In a second step 444, the registration module 239 automatically compares the state of the robot(s) and/or machinery in the image of the scene against that of the robot(s) and/or machinery in the stored images of the scene in the registration library 255 and then identifies a stored image that provides the best matching state. The registration module 239 may then retrieve the configuration parameter(s) associated with the best-matched state in the image of the scene (step 446), and based thereon, perform automated registration of the sensors 102 ₁₋₃ to the machinery (step 448). Optionally, the control system 112 and the robot controller 108 may re-pose the robot 106 and/or other machinery to one or more additional known states (e.g., states that have been successfully employed previously for registration) (step 450). Data related to the state(s) of the robot 106 and/or other machinery and the data acquired by the sensors 102 ₁₋₃ during this procedure can be combined to provide a larger registration data set (step 452). In one embodiment, the combined data can then be compared against the data stored in the registration library 255 to identify the image having the best matching state as described in step 446 (step 454). Subsequently, the registration module 239 can retrieve the configuration parameter(s) associated with the best-matched state in the image of the scene (step 446), and based thereon, perform automated registration of the sensors 102 ₁₋₃ to the machinery (step 448). In some embodiments, the data acquired during re-posing of the robot 106 and/or other machinery to the additional known state(s) is stored in the registration library 255 (step 456).

3) Configuration of Sensors to Appropriately Cover a Scene

To determine an appropriate setup of the 3D sensors 102 ₁₋₃ for best providing coverage of an area in the workspace 100, various considerations, such as occlusions caused by objects relative to the sensors 102 ₁₋₃, must be considered. In various embodiments, the user interface shown on the display 220 provides an interactive 3D display that shows the coverage of all sensors 102 ₁₋₃ to aid in configuration. If the system is configured with sufficient high-level information about the machinery being controlled, such as the location(s) of a dangerous part or parts of the machinery and the stopping time and/or distance, the control system 112 (e.g., the analysis module 237) may be configured to provide intelligent feedback as to whether the configuration of the sensors 102 ₁₋₃ provides sufficient coverage, and/or suggest placement for additional sensors.

In some embodiments, the feedback further includes, for example, a simple enumeration of the areas that are not covered by the fields of the view of the sensors 102 ₁₋₃ and/or proposed sensor locations for achieving the optimal scene coverage. In order to achieve optimal placement of the sensors 102 ₁₋₃, in various embodiments, the analysis module 237 may, based on the feedback, cause a light source (not shown) to project onto the workspace 100 a signal or one or more light beams that outline the monitored coverage of the sensors 102 ₁₋₃ and/or the proposed location for each sensor. The human operator H may then place or adjust the sensors 102 ₁₋₃ based on the proposed sensor locations and/or the outlined coverage. In addition, the control system 112 (e.g., the analysis module 237) may aid the operator H in sensor placement through an augmented reality or virtual reality device that projects an image of the workspace 100 and the sensor coverage onto the display 220 (or a headset). The operator H may place/adjust the sensors based on their locations shown on the image on the display 220. The placement/adjustment of the sensors 102 ₁₋₃ may be automated. For example, as described above, the sensors 102 ₁₋₃ may be supported by software/hardware components 114 ₁₋₃ that are configured to change the poses and positions of the sensors 102 ₁₋₃. In various embodiments, based on the feedback provided by the analysis module 237, the control system 112 may be configured to adjust the software/hardware components 114 ₁₋₃ so as to achieve the optimal scene coverage of the sensors 102 ₁₋₃. In one implementation, the control system 112 further operates the machinery (e.g., move the robot via the controller 108) to a location that can be observed by all (or at least most) sensors 102 ₁₋₃, thereby improving the accuracy of the registration, as well as dynamically determining occlusions or unsafe spaces that cannot be observed by the sensors 102 ₁₋₃; these are marked as unsafe areas in the workspace 100.

In various embodiments, the control system 112 can be programmed to determine the minimum distance from the machinery at which it must detect a person in order to stop the machinery by the time the person reaches it (or a safety zone around it), given protective separation distances determined by the industrial standards, the robot or machine manufacturer, or through a dynamic model of the machinery (which includes conservative estimates of walking speed and other factors). Alternatively, the required detection distance can be input directly into the control system 112 via the display 220. The control system 112 can then analyze the fields of view of all sensors 102 ₁₋₃ to determine whether the workspace 100 is sufficiently covered to detect all approaches. If the sensor coverage is insufficient, the control system 112 may propose new locations for existing sensors 102 ₁₋₃, and/or locations for additional sensors, that may remedy the coverage deficiency. Otherwise, the control system 112 may default to a safe state and not permit any machinery to operate unless the analysis module 237 verifies that all approaches can be monitored effectively by the sensors 102 ₁₋₃.

In some instances, there are areas that the sensors 102 ₁₋₃ cannot observe sufficiently to ensure safety, but that are guarded by other means such as cages, etc. In this case, the user interface can be configured to allow the human operator H to indicate to the control system 112 that these areas may be considered safe, overriding the sensor-based safety analysis and/or any built-in inherent safety analysis.

FIGS. 5A and 5B are flow charts illustrating exemplary approaches for configuring sensors to appropriately cover a scene in a workspace. Referring first to FIG. 5A, in a first step 502, the user interface shown on the display 220 may provide an interactive 3D display that shows the coverage of all sensors 102 ₁₋₃. If the system is configured with sufficient high-level information about the machinery being controlled, the control system 112 will provide intelligent feedback regarding the coverage area provided by the configuration of the sensors 102 ₁₋₃, e.g., as a simple enumeration of the areas that are not covered by the fields of the view of the sensors 102 ₁₋₃, proposed sensor locations for achieving an optimal scene coverage, and/or suggested placement for additional sensors (step 504). In one embodiment, the analysis module 237 may, based on the feedback, cause a light source to project onto the workspace 100 a signal or one or more light beams that outline the monitored coverage of the sensors 102 ₁₋₃ and/or the proposed location for each sensor (step 506). Additionally or alternatively, the analysis module 237 may cause an augmented reality or virtual reality device to project an image of the workspace 100 and the sensor coverage onto the display 220 (step 508). Based on the feedback provided by the analysis module 237 and/or the projected sensor coverage and/or the proposed locations of the sensors, the control system 112 may be configured to adjust the software/hardware components 114 ₁₋₃ associated with the sensors so as to adjust the poses thereof, thereby achieving the optimal scene coverage (step 510). Optionally, the control system 112 further operate the machinery (e.g., moving the robot) to a location that can be observed by all (or at least most) sensors 102 ₁₋₃ (step 512), thereby improving the accuracy of the registration, as well as dynamically determining occlusions or unsafe spaces that cannot be observed by the sensors 102 ₁₋₃ (step 514).

Alternatively, referring to FIG. 5B, the control system 112 can be programmed to determine the minimum distance from the machinery at which it must detect a person in order to stop the machinery by the time the person reaches it (step 522). In some embodiments, the required detection distance can be input directly into the control system 112 (step 524). The control system 112 can then analyze the fields of view of all sensors 102 ₁₋₃ to determine whether the workspace 100 is sufficiently covered to detect all approaches (step 526). If the sensor coverage is insufficient, the control system 112 may propose new locations for existing sensors 102 ₁₋₃, and/or locations for additional sensors that may remedy the coverage deficiency (step 528). Otherwise, the control system 112 may default to a safe state and not permit any machinery to operate unless the analysis module 237 verifies that all approaches can be monitored effectively by the sensors 102 ₁₋₃ (step 530).

4) Registration Validation During System Operation

Once the registrations among the sensors 102 ₁₋₃ and between the sensors 102 ₁₋₃ and the machinery have been achieved, it is critical that the sensors 102 ₁₋₃ remain in the same locations and orientations during operations of the machinery in the workspace 100. In one embodiment, the initial registered state of the sensors can be stored in memory 210 so that it can be retrieved later in case the system is not registered during operation and/or the workcell is moved to a new physical location. When one or more sensors 102 ₁₋₃ are accidentally moved or drift out of their registered positions, the sensors may be misaligned relative to each other and/or the machinery; as a result, the coverage area of the sensors 102 ₁₋₃ may vary outside a predefined area and the control outputs will be invalid and result in a safety hazard. In various embodiments, the same approaches used for initial registration among the sensors 102 ₁₋₃ and between the sensors 102 ₁₋₃ and the machinery described above can be extended to monitor (i) continued accuracy of registration among the sensors 102 ₁₋₃ and between the sensors 102 ₁₋₃ and the machinery during operation and (ii) the coverage areas of the sensors 102 ₁₋₃. For example, during initial registration described above, the control system 112 (e.g., the registration module 239) may compute a set of metrics capturing the fit accuracy of the observed data to a model of static elements in the workspace that is created during the registration process. These metrics may include, for example, registration validation, real-time robot tracking, etc. As the system operates, the same metrics are recalculated in real time. If the metrics or deviations of the metrics from initial metric values (i.e., obtained during initial registration) exceed a specified threshold, and/or if the coverage area is outside the bounds of what is expected is observed, the registration during the system operation may be considered to be invalid and an error condition may be triggered. Subsequently, the robot 106 and/or machinery may be transitioned to a safe state where the robot/machinery is operated with a reduced speed or deactivated. Additionally, if during operation of the machinery, the sensors 102 ₁₋₃ remain in position but the fields of view are obscured or blocked, and/or the measured sensor signals are degraded (e.g., through some failure of the system or through human action), the control system 112 may determine that the outputs are invalid and then transition the machinery to the safe state.

FIG. 6 is a flow chart illustrating an exemplary approach for validating registrations among sensors and between the sensors and machinery during operation of machinery. In a first step 602, during initial registrations among the sensors 102 ₁₋₃ and between the sensors 102 ₁₋₃ and the machinery, the registration module 239 may compute a set of metrics (e.g., registration validation, real-time robot tracking, etc.) capturing the fit accuracy of the observed data to a model of static elements in the workspace 100 that is created during the registration process. Upon completion of the registrations and as the system operates, the registration module 239 may continuously update the same metrics in real time (step 604). If the metrics or deviations of the metrics from initial metric values (i.e., obtained during initial registration) exceed a specified threshold, and/or if the coverage area is outside the bounds of what is expected to be observed, the registration during the system operation may be considered to be invalid and an error condition may be triggered (step 606). Subsequently, the robot 106 and/or machinery may be transitioned to a safe state where the robot/machinery is operated with a reduced speed or deactivated (step 608). Additionally, the analysis module 237 may continuously analyze the acquired sensor signals during operation of the machinery (step 610). If the sensors 102 ₁₋₃ remain in position but the fields of view are obscured or blocked, and/or the measured sensor signals are degraded (e.g., through some failure of the system or through human action), the control system 112 may determine that the outputs are invalid and then transition the machinery to the safe state (step 612). If the metrics or deviations of the metrics from initial metric values do not exceed the specified threshold, the coverage area is within the bounds of the expected observation area, the fields of view of the sensors are not obscured or blocked, and the measured sensor signals are not degraded, the control system 112 may cause the machinery to continuously perform a designated task (step 614).

The term “controller” or “control system” used herein broadly includes all necessary hardware components and/or software modules utilized to perform any functionality as described above; the controller may include multiple hardware components and/or software modules and the functionality can be spread among different components and/or modules. For embodiments in which the functions are provided as one or more software programs, the programs may be coded in a suitable language as set forth above. Additionally, the software can be implemented in an assembly language directed to the microprocessor resident on a target computer; for example, the software may be implemented in Intel 80x86 assembly language if it is configured to run on an IBM PC or PC clone. The software may be embodied on an article of manufacture including, but not limited to, a floppy disk, a jump drive, a hard disk, an optical disk, a magnetic tape, a PROM, an EPROM, EEPROM, field-programmable gate array, or CD-ROM. Embodiments using hardware circuitry may be implemented using, for example, one or more FPGA, CPLD or ASIC processors.

The terms and expressions employed herein are used as terms and expressions of description and not of limitation, and there is no intention, in the use of such terms and expressions, of excluding any equivalents of the features shown and described or portions thereof. In addition, having described certain embodiments of the invention, it will be apparent to those of ordinary skill in the art that other embodiments incorporating the concepts disclosed herein may be used without departing from the spirit and scope of the invention. Accordingly, the described embodiments are to be considered in all respects as only illustrative and not restrictive. 

What is claimed is:
 1. A method of ensuring safe operation of industrial machinery in a workcell, the method comprising the steps of: a. disposing a plurality of image sensors proximate to the workcell; b. registering the sensors to each other in a common reference frame; c. computationally relating the common reference frame of the sensors to a global frame of the workcell; d. registering the plurality of sensors to the industrial machinery; and e. monitoring the industrial machinery during operation thereof based at least in part on images of the workcell acquired by the sensors and the registration of the sensors to each other and to the industrial machinery.
 2. The method of claim 1, wherein the industrial machinery comprises at least a robot arm.
 3. The method of claim 1, wherein the sensors are registered to each other according to steps comprising acquiring, with at least some of the sensors, a first plurality of images of the workcell and registering the sensors to each other based at least in part on the first plurality of images.
 4. The method of claim 3, further comprising: f. generating an initial accuracy metric indicating an accuracy level of the registration of the plurality of sensors to the industrial machinery; and g. following step (f), during operation of the industrial machinery, determining whether a subsequent accuracy metric indicating an accuracy level of the registration deviates from the initial accuracy metric by more than a threshold amount, and if so, altering operation of the industrial machinery.
 5. The method of claim 4, wherein step (g) comprises periodically analyzing a second plurality of images acquired during operation of the industrial machinery to (i) regenerate the accuracy metric, (ii) compare the regenerated accuracy metric to the initial accuracy metric to determine a deviation therebetween, and (iii) altering operation of the machinery if the deviation exceeds a threshold value.
 6. The method of claim 5, wherein the metric comprises at least one of registration validation or real-time robot tracking.
 7. The method of claim 1, further comprising implementing a global-optimization algorithm to register (i) the plurality of sensors to each other and (ii) the plurality of sensors to the industrial machinery.
 8. A control system for ensuring safe operation of industrial machinery in a workcell, the system comprising: a plurality of image sensors proximate to the workcell; and a controller configured to: register the sensors to each other in a common reference frame; computationally relate the common reference frame of the sensors to a global frame of the workcell; register the plurality of sensors to the industrial machinery; and monitor the industrial machinery during operation thereof based at least in part on images of the workcell acquired by the sensors and the registration of the sensors to each other and to the industrial machinery.
 9. The control system of claim 8, wherein the controller is further configured to: cause at least some of the image sensors to acquire a first plurality of images of the workcell; register the sensors to each other based at least in part on the first plurality of images; and convert the first plurality of images to a common reference frame of the sensors.
 10. The control system of claim 9, wherein the controller is further configured to computationally analyze the first plurality of images to verify that there is sufficient overlap and sufficient distinction thereamong.
 11. The control system of claim 8, wherein the controller is further configured to: cause at least one of the sensors to acquire an image of a scene in the workcell; and determine one or more pairs of discrete features on the image of the scene, wherein the plurality of sensors is registered to the industrial machinery based at least in part on the one or more pairs of discrete features.
 12. The control system of claim 8, wherein the image of the scene comprises 3D point cloud data mapping the workcell.
 13. The control system of claim 12, wherein the image of the scene comprises a 2D or 3D CAD model of at least one of the industrial machinery or the workcell.
 14. The control system of claim 12, wherein the controller is further configured to cause the sensors to perform a 2D or 3D scan on the industrial machinery or the workcell, the image of the scene comprising a model of the industrial machinery or the workcell constructed based at least in part on the 2D or 3D scan.
 15. The control system of claim 8, wherein the controller is further configured to: generate an initial accuracy metric indicating an accuracy level of the registration of the plurality of sensors to the industrial machinery; and during operation of the industrial machinery, determine whether a subsequent accuracy metric indicating an accuracy level of the registration deviates from the initial accuracy metric by more than a threshold amount, and if so, alter operation of the industrial machinery.
 16. The control system of claim 15, wherein the controller is further configured to: cause the sensors to periodically acquire a second plurality of images during operation of the industrial machinery; regenerate the accuracy metric; compare the regenerated accuracy metric to the initial accuracy metric to determine a deviation therebetween; and alter operation of the machinery if the deviation exceeds a threshold value.
 17. The control system of claim 16, wherein the metric comprises at least one of registration validation or real-time robot tracking.
 18. The control system of claim 8, wherein the controller is configured to execute a global-optimization algorithm to register (i) the plurality of sensors to each other and (ii) the plurality of sensors to the industrial machinery. 